Social Engineering: The Science of Human Hacking

What is "Social Engineering: The Science of Human Hacking"?

Social Engineering: The Science of Human Hacking is Christopher Hadnagy's book on social engineering, published by Wiley as the heavily rewritten second edition of his earlier Social Engineering: The Art of Human Hacking. Hadnagy founded Social-Engineer, LLC, a company specializing in phishing, vishing and physical impersonation assessments, and the book draws on that field experience.

It is not a tool manual but a book about people: how information about a target is gathered, how a believable pretext is built, how trust is created and how a decision is influenced. And, above all, how to defend against all of it.

What this book is useful for

• Pentesters and red teamers running authorized phishing campaigns, vishing calls or physical access tests.
• Awareness teams designing employee training who need to understand how an attacker thinks.
• OSINT analysts: the information-gathering phase is the foundation of any social engineering attack.
• Any security professional: most serious incidents start with an email or a phone call, not an exploit.

Topics covered

1. Information gathering (OSINT): which public data about people and companies helps prepare an attack.
2. Profiling through communication: models like DISC to adapt how you speak to the person in front of you.
3. Pretexting: creating a believable persona and story consistent with the target's context.
4. Rapport: techniques to build trust quickly.
5. Influence versus manipulation: persuasion principles and the ethical line the author argues you should not cross.
6. Framing and elicitation: obtaining information without asking for it directly.
7. Nonverbal communication: facial expressions and body language.
8. Attack vectors: phishing, vishing, SMiShing and in-person impersonation.
9. Mitigation: how to design awareness programs and processes that reduce risk.

Getting the most out of it: a reading path

1. Read the OSINT and pretexting chapters first: they are the practical foundation for the rest.
2. Pair it with reconnaissance tools. For example, Sherlock to find a username's profiles across social networks or Maltego to map relationships between people, domains and emails:

# Search a username across hundreds of sites (authorized use only)
sherlock target_username

# Basic email and subdomain gathering for an organization under assessment
theHarvester -d audited-company.com -b duckduckgo,crtsh

3. Practice the human side in safe settings: elicitation exercises in everyday conversations (without deceiving anyone) to train active listening.
4. Design a mock campaign for your own organization, with scope, pretext, metrics and a follow-up training plan. It is the best exercise to lock in what you learned.

Any social engineering technique must only be used under a contract with written authorization; outside that framework it is fraud.

Pro tips

• Read with a defensive mindset: for every technique, think about which control (process, training, verification) would have stopped it.
• Document the scope before any test: who may be contacted, through which channels and what is off-limits.
• Do not shame victims in reports: the goal is to improve processes, not single out people. The book itself insists on this.
• Complement it with the author's other books, such as Phishing Dark Waters (on phishing) or Human Hacking (focused on everyday communication).

Pros and cons

• Pros: written from real practice, strong balance between technique and ethics, useful for both authorized attackers and defenders, engaging read with many anecdotes.
• Cons: some examples are very US-centric, and it barely covers technical tools (that is not its goal).

Alternatives and complementary resources

• Maltego: to put the book's OSINT phase into practice.
• Sherlock: username search across social networks.
• TryHackMe: includes phishing and OSINT rooms to practice legally.

Frequently asked questions

Is it legal to learn social engineering?

Yes. Learning the techniques is legal and necessary for defense. What is illegal is using them to deceive people or organizations without an explicit contract and authorization.

What is the difference between "The Art of Human Hacking" and "The Science of Human Hacking"?

"The Science of Human Hacking" is the second edition, reorganized and updated, with more emphasis on ethics, influence versus manipulation and modern attacks such as vishing. If you only read one, choose the newer edition.

Is there a Spanish translation?

The reference edition is the English one. Check bookstores for whether a translation is currently available.

Do I need technical knowledge to read it?

No. It is accessible to anyone interested in security; the technical part is limited to information gathering.

To practice reconnaissance and OSINT legally, try the challenges at the Hackers en Acción Academy.